The ipsecctl utility controls flows that
determine which packets are to be processed by IPsec. It allows ruleset
configuration, and retrieval of status information from the kernel's SPD
(Security Policy Database) and SAD (Security Association Database). It also
can control isakmpd(8) and
establish tunnels using automatic keying with
isakmpd(8). The ruleset grammar
is described in
ipsec.conf(5).